Testing and licensing are in place, and the repository remains active rather than archived. The project has gone without a release for over a year, has no recent commits, and still describes itself as not production-ready.
58%
Total Score
75
100
79
75
The package includes a 1,516-character README, tests, and a GitHub release for this version. However, the README explicitly says the project is a work in progress and not ready for production.
The package has 22 releases since July 2021, but none in the last 12 months and the latest release was over a year ago, indicating substantially slowed maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing support.
The project uses Make and Composer for build tasks, but no security-scanning tools were detected. This is a modest hygiene gap, not evidence of abandonment by itself.
No repository security policy was found, leaving vulnerability-reporting guidance undocumented. This lowers transparency somewhat but is not a severe dependency risk alone.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.8.4|^2.7.0 | — | — |
psr/http-client Version ~1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.